$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3a47a11-8372-34e1-878f-58fd57213e27.roa File: a3a47a11-8372-34e1-878f-58fd57213e27.roa (raw, json) Hash identifier: bqzpr3B9idaN9JcefrIR6sVUXtBby2L8D0zESduNwow= Subject key identifier: FE:47:7B:E4:C5:97:92:CF:46:1D:7F:CA:A7:09:BE:F4:45:4A:A9:81 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F497352C87C232DBD3DC83580 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3a47a11-8372-34e1-878f-58fd57213e27.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 2604:2e8b::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:52:c8:7c:23:2d:bd:3d:c8:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ebbd4d9d-7b6d-4c5d-a571-3fcebbf1bba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:20:57:9b:df:15:43:94:0c:44:97:25:8c:15: d5:eb:b0:90:7d:7d:e0:1d:56:a8:c5:27:56:9f:0f: 6e:29:37:9a:bd:b4:98:78:d2:c7:9b:d5:cc:ae:19: 69:6b:81:d7:0a:b1:81:33:a0:4d:b7:bf:2b:19:37: 12:53:92:b1:41:b7:ba:b6:9e:f2:06:62:7c:07:09: 59:90:fc:76:ad:c3:3b:d9:75:09:ab:78:6f:75:22: 39:45:cc:a6:71:1e:bd:4f:af:af:3c:ff:ad:2a:9d: 7d:45:5a:04:ad:c4:7b:05:98:dd:00:52:46:69:5e: b3:ea:49:5d:5a:8f:50:57:e8:67:fa:67:55:5c:9f: 3c:38:ef:55:78:d6:4a:c7:fb:87:04:b2:60:07:69: ed:0c:70:8c:48:ab:d4:b1:43:d4:2e:0a:34:16:ee: 63:2d:cd:ed:f7:70:28:26:33:84:ab:f1:5f:2b:b6: 7c:69:bf:b9:6b:c6:09:43:77:e5:0b:b5:85:35:fb: 49:0a:99:d2:b4:a8:3f:23:82:a8:ee:0f:ba:69:ed: 62:c0:6c:4d:db:f9:c7:4d:f8:8e:82:8d:76:8f:b5: 41:92:7d:c6:bc:a9:bd:22:a5:b5:b4:c3:ba:9d:44: 26:86:0f:73:ec:e4:a8:43:a4:ca:43:e6:1b:89:a9: 3c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:47:7B:E4:C5:97:92:CF:46:1D:7F:CA:A7:09:BE:F4:45:4A:A9:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3a47a11-8372-34e1-878f-58fd57213e27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv6: 2604:2e8b::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:24:fc:7e:b4:90:76:30:96:83:f6:45:bd:99:f3:10:e6:06: 1d:5b:fb:75:71:44:92:0d:fb:17:ed:e6:72:2d:dd:4e:19:58: 95:d0:f3:65:be:ce:51:e8:e6:ab:77:4e:07:59:c5:84:85:3a: 5a:9d:5e:c1:85:77:f7:32:60:46:e9:19:f5:07:71:1a:ad:96: 43:3c:3a:28:05:3e:4c:5f:3a:60:6c:da:80:04:42:cc:eb:eb: 4c:07:3d:3f:9f:ae:7a:34:34:d2:0b:0b:95:b4:23:3b:fe:8f: 7e:d8:87:46:4b:71:3e:5e:28:6f:79:d2:f4:52:a4:f1:d5:6b: 5a:c4:91:b4:dd:01:07:9a:73:07:02:c3:31:16:d8:cc:81:3c: 9d:28:f2:b8:00:4a:2c:ae:4b:05:6b:8a:f9:82:8a:62:4a:5c: b1:b4:a3:24:56:8b:b7:ba:06:04:87:b9:e5:00:5f:61:48:9b: ff:c3:6d:c5:15:41:c3:de:a1:89:3b:89:5f:91:e8:ad:11:18: a0:9f:c6:a0:13:35:12:bc:fc:bc:3f:cd:24:21:f1:49:21:33: 94:63:5d:60:29:48:b8:f9:e3:c4:d3:48:ac:1f:a6:98:ae:8b: c1:46:73:00:6d:75:b6:16:34:04:d8:5e:51:37:ab:28:70:6c: e7:aa:5c:31 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9Jc1LIfCMtvT3INYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWJiZDRkOWQtN2I2ZC00YzVkLWE1NzEtM2ZjZWJiZjFiYmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliBXm98VQ5QMRJcljBXV67CQfX3gHVaoxSdW nw9uKTeavbSYeNLHm9XMrhlpa4HXCrGBM6BNt78rGTcSU5KxQbe6tp7yBmJ8BwlZ kPx2rcM72XUJq3hvdSI5RcymcR69T6+vPP+tKp19RVoErcR7BZjdAFJGaV6z6kld Wo9QV+hn+mdVXJ88OO9VeNZKx/uHBLJgB2ntDHCMSKvUsUPULgo0Fu5jLc3t93Ao JjOEq/FfK7Z8ab+5a8YJQ3flC7WFNftJCpnStKg/I4Ko7g+6ae1iwGxN2/nHTfiO go12j7VBkn3GvKm9IqW1tMO6nUQmhg9z7OSoQ6TKQ+Ybiak8lQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFP5He+TFl5LPRh1/yqcJvvRFSqmBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTNhNDdhMTEtODM3Mi0z NGUxLTg3OGYtNThmZDU3MjEzZTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEABST8frSQdjCWg/ZFvZnzEOYGHVv7dXFEkg37F+3mci3dThlYldDz Zb7OUejmq3dOB1nFhIU6Wp1ewYV39zJgRukZ9QdxGq2WQzw6KAU+TF86YGzagARC zOvrTAc9P5+uejQ00gsLlbQjO/6PftiHRktxPl4ob3nS9FKk8dVrWsSRtN0BB5pz BwLDMRbYzIE8nSjyuABKLK5LBWuK+YKKYkpcsbSjJFaLt7oGBIe55QBfYUib/8Nt xRVBw96hiTuJX5HorREYoJ/GoBM1Erz8vD/NJCHxSSEzlGNdYClIuPnjxNNIrB+m mK6LwUZzAG11thY0BNheUTerKHBs56pcMQ== -----END CERTIFICATE-----Generated at Sun Oct 4 08:02:55 2026 by rpki-client